Privacy Policy for pik88

1. Introduction

Clause 1

pik88 ("we", "us", "our") operates the online gambling platform accessible at https://pik88.club, providing sports betting, live casino, virtual sports, video poker, and premium slot products to English-preference players across Indonesia. In delivering these services, pik88 collects and processes personal data belonging to registered players and visitors.

We are committed to handling personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This Privacy Policy sets out, in plain language, what data we collect, why we collect it, who we share it with, how long we keep it, and what choices and rights you have as a data subject.

This Policy should be read alongside our Terms & Conditions, which together constitute the binding agreement between pik88 and you. Where this Policy uses terms defined in the Terms & Conditions (such as "Account", "Player", "KYC", "Balance"), those definitions apply here as well.

2. Definitions

Clause 2

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion.
• "Data Controller" means pik88, the entity that determines the purposes and means of Processing Personal Data.
• "Data Processor" means any third party engaged by pik88 to process Personal Data on our behalf and in accordance with our documented instructions.
• "Data Subject" means the individual to whom Personal Data relates — in the context of this Policy, principally the registered Player.
• "Sensitive Data" means Personal Data that merits heightened protection, including government-issued identity document numbers, bank account details, and health information relevant to responsible gaming assessments.
• "Cookie" means a small text file placed on your device by the pik88 platform for the purposes described in Clause 11.
• "IDR" means Indonesian Rupiah, the sole currency in which pik88 Accounts are denominated.

3. Data We Collect

Clause 3

pik88 collects the following categories of Personal Data from players and platform visitors:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, gender, nationality, KTP / passport / SIM number	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address in Indonesia	Registration & Account updates
Financial Data	Bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), account holder name, last four digits of account number; e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)	Deposit & withdrawal processing
Transaction Data	Deposit amounts, withdrawal amounts, transaction timestamps, transaction reference numbers, IDR balances	Every financial transaction
Gameplay Data	Bets placed, games played, stakes, outcomes, session durations, win/loss history	All game and betting activity
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, time zone (WIB/WITA/WIT)	Every platform session
Usage Data	Pages visited, features accessed, click-stream data, session start/end times	Every platform session
Communications Data	Live chat transcripts, support email content, complaint records	Customer support interactions
KYC Document Data	Scanned copies or photographs of identity documents and proof-of-address documents	KYC verification process
Marketing Preferences	Opt-in / opt-out status for promotional communications	Registration & Account settings updates

4. How We Collect Your Data

Clause 4

pik88 collects Personal Data through the following channels and mechanisms:

4.1 Direct Collection

You provide data directly to pik88 when you complete the Account registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your Account profile. All form submissions on the pik88 platform use encrypted HTTPS connections.

4.2 Automated Collection

When you access the pik88 platform, our servers automatically log Technical Data and Usage Data as part of normal platform operations. This data is collected via server logs, session management systems, and first-party cookies (see Clause 11). We do not use third-party behavioural tracking cookies that follow you outside of pik88.club.

4.3 Third-Party Sources

pik88 may receive limited data about you from third-party service providers engaged to support our operations, including:

• Payment processors: Transaction confirmation data from local Indonesian payment rails (bank transfer gateways, e-wallet providers) to verify deposit and withdrawal status.
• KYC verification partners: Data verification outcomes from identity-document checking services engaged to support our age and identity verification obligations.
• Fraud prevention services: Aggregated risk signals from fraud detection systems that help us identify unusual account activity patterns consistent with money laundering or account takeover attempts.
• Game studios: Gameplay result data from certified game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and others) to accurately settle bets and record outcomes in your Account history.

5. Purposes of Processing

Clause 5

pik88 processes your Personal Data for the following specific and documented purposes:

• Account Operation: Creating, maintaining, and operating your player Account, processing deposits and withdrawals in IDR, settling bets, and crediting bonuses.
• Identity & Age Verification (KYC): Confirming that you are a real person, that you are at least 21 years of age, and that your payment instruments are registered in your name — as required by our operating standards and responsible gaming obligations.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, account takeover, duplicate account creation, bonus abuse, and other forms of Prohibited Conduct as defined in our Terms & Conditions.
• Customer Support: Responding to queries, complaints, and dispute resolution requests submitted via live chat or email at [email protected].
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling indicators, administering self-exclusion and deposit-limit tools, and communicating responsible gaming information to players who may be at risk.
• Legal & Regulatory Compliance: Meeting applicable record-keeping, anti-money-laundering, and identity verification obligations imposed by pik88's international licensing authority.
• Platform Improvement: Analysing aggregate, anonymised usage data to identify technical issues, improve game performance, and enhance the overall player experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal campaign communications (e.g., Idul Fitri, Chinese New Year / Imlek, Indonesian Independence Day promotions) to players who have opted in to receive marketing emails. You may opt out at any time by updating your Account preferences or contacting support.
• Dispute Resolution: Maintaining accurate transaction and gameplay records to resolve any disputes regarding bet outcomes, withdrawal amounts, or bonus calculations.

6. Legal Basis for Processing

Clause 6

pik88 relies on the following legal bases to process your Personal Data, consistent with internationally recognised data protection frameworks:

• Contractual Necessity: Processing that is necessary to perform the contract between pik88 and you — specifically, to operate your Account, process transactions, settle bets, and deliver the services you have requested.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC identity verification, anti-money-laundering record-keeping, and responding to lawful requests from competent authorities.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — where such processing is proportionate and does not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications, where you have given explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing & Disclosure

Clause 7

pik88 does not sell, rent, or trade your Personal Data to any third party. We share data only in the following limited circumstances and only to the extent strictly necessary:

7.1 Service Providers (Data Processors)

pik88 engages carefully selected third-party Data Processors to support platform operations. All processors are bound by data processing agreements that restrict them to processing data solely on pik88's instructions and to no lesser standard than this Policy. Categories of processors include:

• Payment gateway providers facilitating IDR transfers via Indonesian bank rails and e-wallets
• KYC and identity document verification services
• Cloud hosting and data centre operators providing encrypted server infrastructure
• Fraud detection and risk-scoring platform providers
• Customer support software providers (live chat platform)
• Email delivery infrastructure providers (used for transactional account emails only)

7.2 Game Studios

To facilitate game play and accurately settle bets, limited gameplay and session data is transmitted to the relevant certified game studio (e.g., Pragmatic Play, Evolution Gaming) during an active game session. Studios receive only the data necessary to run the game session and are contractually prohibited from using that data for any other purpose.

7.3 Legal and Regulatory Disclosure

pik88 may disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by a binding legal order, or where pik88 has a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of a person, or enforce our Terms & Conditions. We will, where legally permissible, notify affected players of such disclosures.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a material part of pik88's assets, Personal Data held at the time of the transaction may be transferred to the acquiring entity, subject to that entity maintaining data protection standards no less protective than this Policy. Affected players will be notified of any such transfer and of any material change to this Policy resulting from it.

8. International Data Transfers

Clause 8

pik88 is an internationally operated platform. Some of our Data Processors — including cloud hosting providers and game studios — may be located in jurisdictions outside Indonesia. Where Personal Data is transferred internationally, pik88 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses or equivalent contractual protections binding the receiving party to data protection standards consistent with this Policy.
• Transfers to processors operating in jurisdictions that maintain internationally recognised data protection frameworks.
• Technical safeguards including end-to-end encryption during transit and at rest, ensuring that data remains protected regardless of the jurisdiction in which it is processed.

By using the pik88 platform and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your Personal Data under the safeguards described in this Clause.

9. Data Retention

Clause 9

pik88 retains Personal Data for the periods set out below. After the applicable retention period expires, data is either securely deleted or anonymised so that it can no longer identify you.

Data Category	Retention Period	Rationale
Identity & KYC Documents	5 years after Account closure	Anti-money-laundering and compliance record-keeping obligations
Transaction & Financial Records	5 years after Account closure	Financial audit trail and dispute resolution
Gameplay History	3 years after Account closure	Dispute resolution and responsible gaming monitoring
Contact & Profile Data	Duration of Account + 1 year post-closure	Account operation and post-closure support queries
Customer Support Records	3 years from date of interaction	Dispute resolution and service quality review
Technical & Usage Logs	12 months from collection	Security monitoring and platform performance analysis
Marketing Preferences	Until opt-out or Account closure + 6 months	Proof of consent / opt-out record
Self-Exclusion Records	Minimum 7 years	Responsible gaming obligation — to prevent re-registration during exclusion period

10. Security Measures

Clause 10

pik88 implements a multi-layered approach to data security, combining technical controls, organisational policies, and staff training to protect Personal Data against unauthorised access, disclosure, alteration, and destruction:

10.1 Technical Controls

• Encryption in Transit: All communications between your browser and pik88 servers use TLS 1.2 or higher, providing 256-bit symmetric encryption. HTTPS is enforced site-wide with HTTP Strict Transport Security (HSTS).
• Encryption at Rest: Sensitive data fields — including identity document scans, payment instrument identifiers, and KYC records — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to production systems containing Personal Data is restricted to authorised pik88 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Intrusion Detection: pik88 employs continuous network monitoring and intrusion detection systems to identify and respond to security incidents in real time.
• Regular Security Testing: The pik88 platform is subject to regular vulnerability assessments and penetration testing by qualified security professionals.

10.2 Organisational Controls

• All pik88 staff and contractors who handle Personal Data are subject to confidentiality obligations and undergo data protection training as part of their onboarding.
• pik88 maintains a documented incident response plan. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay.
• Third-party Data Processors are subject to due diligence assessments and contractual data processing agreements prior to engagement.

11. Cookies & Tracking Technologies

Clause 11

pik88 uses cookies and similar technologies solely for the purposes of platform operation, security, and aggregate analytics. We do not use third-party advertising networks or cross-site tracking cookies.

11.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for core platform functionality — including session management (keeping you logged in across page loads), CSRF protection tokens, and load balancing. These cannot be disabled without severely impairing platform functionality.
• Functional Cookies: Remember your preferences such as preferred game category, display language, and notification settings across sessions.
• Analytics Cookies: First-party cookies that collect aggregated, anonymised data about how players navigate the platform — page view counts, feature usage frequency, and error rates. This data is used exclusively to improve platform performance and is never shared externally in identifiable form.
• Security Cookies: Used by our fraud detection systems to assign a consistent device identifier to your session, enabling detection of account takeover attempts and unusual login patterns.

11.2 Managing Cookies

You can manage or delete cookies at any time through your browser's settings. Note that disabling strictly necessary cookies will prevent you from logging into your Account and using core platform features. Instructions for managing cookies in major browsers are available at the respective browser's support documentation.

pik88 does not currently respond to "Do Not Track" (DNT) browser signals, as there is no universally accepted standard for interpreting such signals. However, our cookie practices are already limited to the categories described above.

12. Your Data Protection Rights

Clause 12

As a Data Subject, you hold the following rights with respect to your Personal Data held by pik88. To exercise any of these rights, submit a written request to [email protected]. pik88 will respond within 30 calendar days of receiving a complete and valid request. We may need to verify your identity before processing a request.

• Right of Access: You have the right to obtain confirmation of whether pik88 holds Personal Data about you, and to receive a copy of that data together with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data that pik88 holds about you. You can update most profile information directly via your Account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where the data has been unlawfully processed. This right is subject to pik88's legal retention obligations — we cannot delete data that we are required by law to retain.
• Right to Restriction of Processing: You may request that pik88 restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is contested or while an objection is being considered.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your data in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your Personal Data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, in which case pik88 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

13. Minors & Age Restriction

Clause 13

The pik88 platform is strictly intended for adults aged 21 years and above. pik88 does not knowingly collect Personal Data from any person under the age of 21. We apply mandatory age verification at the point of withdrawal and reserve the right to request proof of age at any time during the Account lifecycle.

If pik88 discovers or has reasonable grounds to believe that Personal Data has been collected from a person under 21 — whether through misrepresentation at registration or any other means — we will immediately suspend the Account, initiate an investigation, and permanently delete all Personal Data associated with the Account, subject to any retention obligations required to report the incident to the relevant authorities.

If you are a parent or guardian and believe that your child under 21 has created a pik88 Account, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and act within 48 hours of receiving a substantiated report.

14. Changes to This Policy

Clause 14

pik88 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. Material changes — defined as changes that meaningfully affect how we collect, use, or share your Personal Data — will be communicated to registered players via the email address on file at least 14 days before the changes take effect.

Minor updates (such as typographical corrections, clarifications that do not alter the substance of the Policy, or updates to contact information) may be made without prior notice, though the "Last Updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the pik88 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must close your Account before the effective date of the changes by contacting [email protected].

All prior versions of this Privacy Policy are archived internally and are available on request for players who wish to review the historical record of our data practices.

15. Contact & Data Requests

Clause 15

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or wish to raise a concern about pik88's data practices, please contact our Privacy team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Use "Privacy Request" for data subject rights requests, "Privacy Question" for general enquiries, and "Data Breach Report" for suspected security incidents
• Live Chat: Available 24/7 on the pik88 platform — staffed by Indonesian-speaking and English-speaking agents
• Response Time: We aim to acknowledge all privacy requests within 2 business days (WIB) and provide a full response within 30 calendar days

For responsible gaming matters — including self-exclusion, deposit limit requests, and cooling-off periods — please visit our dedicated Responsible Gaming page or contact support with the subject line "Responsible Gaming".